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2a)D This action is FINAL. 2b)l3 This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 
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Application Papers 
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DETAILED ACTION 

CLAIMS PRESENTED 

Claims 1-64 are presented. 

PRIOR ART 

The art made of record and not relied upon is considered pertinent to applicant's 
disclosure. The art disclosed general background. In particular, note the 
steganography in http://www.cotse.com/tools/stega.htm . 

CLAIM REJECTIONS 

The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed 
or described as set forth in section 102 of this title, if the differences between the 
subject matter sought to be patented and the prior art are such that the subject 
matter as a whole would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was 
made. 

Claims 1-64 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Cottrell (US Patent 5,465,084). 

Regarding claim 1 , Cottrell teaches "A method for establishing a secret to 
authenticate a user comprising the steps of: 

receiving a secret pattern on a graphical interface, wherein the secret pattern 
comprises a sequence of discrete graphical choices; converting each discrete graphical 
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choice in the sequence of discrete graphical choices into a value to produce a sequence 
of values, wherein the sequence of values corresponds to the sequence of discrete 
graphical choices (column 2, lines 10-45, also figures 4-5, i.e. different graphical 
choices are made to form codewords); 

selecting a codeword from a plurality of codewords for each value in the 
sequence of values to generate a sequence of codewords, the plurality of codewords 
being associated with an ... code; calculating a security value of a security parameter 
and the sequence of codewords; and comparing the security value of the security 
parameter to a threshold value (column 2, lines 10-45, also figures 4-5, i.e. different 
graphical choices are made to form codewords). 

These passages of Cottrell do not teach "error-correcting" in the sense of the 

claim. 

Nevertheless, it was well known in the art to have a "error-correcting" situation in 
computer entry for the motivation of permitting ease of entry of data (by permitting a 
reasonable amount of error in entry) 

Hence, it would have been obvious to those of ordinary skill in the art at the time 
of the claimed invention to modify Cottrell for the motivation noted in the previous 
paragraphs so as to teach the claimed invention. 

Regarding claim 2 (entropy, etc.), such particular features are well known in the 
art for the motivations of ease of programming and of security. 

Regarding claim 3 (minentropy, etc.), such particular features are well known in 
the art for the motivations of ease of programming and of security. Regarding claims 4- 
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8, such particular features are well known in the art for the motivations of ease of 
programming and of security. 

Regarding claim 9, Cottrell teaches "A method for establishing a secret to 
authenticate a user comprising the steps of: 

receiving a secret pattern on a graphical interface, wherein the secret pattern 
comprises a sequence of discrete graphical choices; converting each discrete graphical 
choice in the sequence of discrete g'raphical choices into a value to produce a 
sequence of values, wherein the sequence of values corresponds to the sequence of 
discrete graphical choices' (column 2, lines 1 0-45, also figures 4-5, i.e. different 
graphical choices are made to form codewords), 

selecting a codeword from a plurality of codewords for each value in the 
sequence of values to generate a sequence of codewords, the plurality of codewords 
being associated with an ... code; calculating an offset between each value in the 
sequence of values and the corresponding codeword in the sequence of codewords to 
generate a sequence of offsets; and hashing the sequence of codewords to produce a 
hash of the sequence of codewords (column 2, lines 1 0-45, also figures 4-5, i.e. 
different graphical choices are made to form codewords)." 

These passages of Cottrell do not teach "error-correcting" in the sense of the 

claim. 

Nevertheless, it was well known in the art to have a "error-correcting" situation in 
computer entry for the motivation of permitting ease of entry of data (by permitting a 
reasonable amount of error in entry) 
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Hence, it would have been obvious to those of ordinary skill in the art at the time 
of the claimed invention to modify Cottrell for the motivation noted in the previous 
paragraphs so as to teach the claimed invention. 

Regarding claim 10 (point in graphical interface, etc.), such particular features 
are well known in the art for the motivations of ease of use and of security. 

Regarding claim 1 1 (displaying image, etc.), such particular features are well 
known in the art for the motivations of ease of use and of security. Regarding claims 
12-58, such particular features are well known in the art for the motivations of ease of 
programming and of security. 

Regarding claim 59, Cottrell teaches "A method for generating a cryptographic 
secret from a visual password, the method comprising the steps of: 

receiving a secret pattern on a graphical interface, wherein the secret pattern 
comprises a sequence of discrete graphical choices; converting each discrete graphical 
choice in the sequence of discrete graphical choices into a value to produce a sequence 
of values, wherein the sequence of values corresponds to the sequence of discrete 
graphical choices (column 2, lines 10-45, also figures 4-5, i.e. different graphical 
choices are made to form codewords); 

selecting a codeword from a plurality of codewords for each value in the 
sequence of values to generate a sequence of codewords, the plurality of codewords 
being associated with an error-correcting code; and manipulating the sequence of 
codewords to produce a cryptographic secret (column 2, lines 10-45, also figures 4-5, 
i.e. different graphical choices are made to form codewords). 
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Regarding claim 60 (use of offsets to generate codewords, etc.), such particular 
features are well known in the art for the motivations of ease of programming and of 
security. 

Regarding claim 61 (use of error-correcting codes to generate codewords, etc.), 
such particular features are well known in the art for the motivations of ease of 
programming and of security. Regarding claims 62-64, such particular features are well 
known in the art for the motivations of ease of programming and of security. 

Conclusion 
Points of Contact 

Any response to this action should be mailed to: 

Commissioner of Patents and Trademarks 
Washington, D.C. 20231 

or faxed to: 

(703) 746-7239, (for formal communications intended for entry) 



Or: 
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(703) 746-5606 (for informal or draft communications, please label "PROPOSED" or 
"DRAFT") 

Hand-delivered responses should be brought to Crystal Park II, 2121 Crystal Drive, 
Arlington. VA., Sixth Floor (Receptionist). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to David Jung whose telephone number is (703) 308-5262 
or Greg Morse whose telephone number is (703) 308-4789. 



David Jung 



Patent Examiner 
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